Resolve "update import_oncat to use oidc tokens"

we receive oidc tokens (id and refresh ones) in a tool via environment variables, update id token if needed, and scp files using the oidc-pam module.

Later can see if we can get files using bioblend (when file sources are ready for auth via a token).

Closes #16 (closed)